General

  • Target

    New Client.exe

  • Size

    65KB

  • MD5

    bcc39a71f530e4e61707384aeaa5678a

  • SHA1

    7d8f81c3744e4f4aba66a371ca0491337646fa4e

  • SHA256

    cc59fa79940a007a2c365b6ba97190a320a2d042aaa7943fb93f7288e8c2581b

  • SHA512

    9bde68ce4b3d6ff91c146fd23adea7a638d0b8101840e87dc2f29d7370571a543fedfcbcdb2563411647afd6e926e6d99de8f378b8b16358b745b636179f7cda

  • SSDEEP

    1536:NWqKkTm4BoN36t4QviFw1ijtkBnvbcfLteF3nLrB9z3nYaF9bMS9vM:NWqKkC4BoN36t4QviFCyKBnYfWl9zIa8

Score
10/10

Malware Config

Extracted

Family

njrat

Version

Platinum

Botnet

HacKed

C2

127.0.0.1:9426

Mutex

Client.exe

Attributes
  • reg_key

    Client.exe

  • splitter

    |Ghost|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • New Client.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections